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Simpler, more effective threat defense 


Malware, phishing, cryptomining, and more attacks will strike. Mitigate the impact. 


To keep up with the ever-shifting threat landscape, Cloudflare unites many once-distinct security 
layering defenses is a best practice, but using too services — even shifting all the endpoint compute 
many distinct tools to improve security is not only that takes place within browsers — into one Zero 
costly and complex, it trades off performance. Trust platform that runs on a massive Anycast edge 
Smaller orgs want simpler ways to reduce risk, network. Better threat defense starts with Zero 
mid-sized orgs also need more effective responses, Trust — verifying devices are safely managed before 
and larger orgs also require visibility in one place. they can connect to corporate resources. 


The solution: Integrated threat defense across network and endpoint security 


Endpoint Partners 


Verify Filter Isolate Protect Detect Filter Isolate 
User Identity DNS/HTTP All Browser AV Scan/File Control Forensics C2, DGA, or DNS All Apps on 
Device Posture Requests Functions Exploit Prevention Sandbox Tunneling Requests Network 
Log Inspect Log Log 
User Requests AV Scan/File Control Device Requests Device Requests 


Cloudflare filters requests based on our categorization Yet, breaches happen. To contain damage, 
and your lists. Your policy rules will block the traffic Cloudflare effectively responds by blocking 
over any port and protocol, or isolate browser functions C2 and other device requests that would 
to keep untrusted code away from your devices. Our exfiltrate data, download a secondary 

Zero Trust browser isolation further inspects traffic and payload, or activate a ransom. Our Zero 
user interactions, controlling the types of files that can be Trust network access mitigates lateral 
accessed with AV scanning when downloads occur. It’s movement by isolating applications from 
easy to push logs into a cloud storage or SIEM platform. compromised devices within the network. 
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Cloudflare One Intel Platform 


Threat hunting based on machine 
learning using our network data 

e 9100+ Network interconnects 
e 738B+ DNS requests per day 

e 25M+ Internet properties 
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Threat aggregation based on 
intelligence from our ecosystem 


e Premium third-party feeds 
e OSINT and shared feeds 
e Community-provided feedback 


Security risk categories Malware Newly seen domains C2 & botnet Spyware 
to block or isolate Phishing New domains DGA domains Spam 
per policy rule Cryptomining Unreachable domains DNS tunneling Anonymizer 


Cloudflare’s intel effectively blocks known and emerging 
threats due to our network data and ecosystem. 


Yet, no matter how ... 

e many threat hunters or threat feeds a vendor has, 
e much data or machine learning is used, and 

e often intelligence is updated or fast it is enforced 
... filters and inspections fail to block 100% of threats. 


And your security teams cannot block all sites that pose 
some risk to your org without disrupting employees, 
which may cost more in lost in productivity and IT ticket 
handling than the resulting damage from a threat. 


Other Secure Web Gateways 
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Inspect 
DNS/HTTP Request 


File Scanning/Control 


Full Risk 4 Sizable Risk Alerts & 


0-Day Threats 
4% Detected 
1% Undetected 


~75% Blocked ~20% Blocked 


That is why you need a Zero Trust approach to 
Internet browsing. Cloudflare Browser Isolation is ... 

e Lightning-fast with a flawless user experience, 
e and cost-effective to use for all unblocked sites: 


Uncategorized Risky Low-Risk 
Coming soon: 

e Inspect and control data in use, not just in transit. 
e Specify where to store downloaded files. 


e Prevent credentials from being entered into forms. 
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~75% Blocked ~25% Blocked or Isolated 


Contact us today to request access to an enterprise plan account of Cloudflare for Teams. 
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